{
  pkgs,
  lib,
  grapevine,
  ...
}:

{
  imports = [
    ../../modules/base-server.nix
    ./set/matrix/root.nix
  ];

  networking = {
    hostName = "Module-dev";
    useDHCP = lib.mkForce true;
    defaultGateway.interface = "eth0";
    nat = {
      enable = true;
      internalInterfaces = [
        "ve-+"
        "vb-+"
      ];
      externalInterface = "ens18";
      enableIPv6 = false;
    };
    enableIPv6 = lib.mkForce false;
    nameservers = lib.mkForce [ "192.168.1.1" ];
  };

  monitoring = {
    monitorAll = true;
    localPrometheus = true;
    exposePrometheus = true;
    localGrafana = true;
    exposeGrafana = true;
    nginxHost = "monitoring.rory.gay";
    nginxSsl = true;
  };

  nixpkgs.config.permittedInsecurePackages = [
    "olm-3.2.16"
    "dotnet-runtime-wrapped-7.0.20"
    "dotnet-runtime-7.0.20"
    "dotnet-sdk-7.0.20"
  ];
  services.irqbalance.enable = true;

  environment.memoryAllocator.provider = "jemalloc";

  system.stateVersion = lib.trivial.release; # DO NOT copy to real configs!

  environment.systemPackages = with pkgs; [ waypipe ];
  nix.nrBuildUsers = 128;
}